
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File: 564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier: 7G0AfJpqI4wrWNV+ibFzxFNpQLYuQlk2A+Qcqnr7W/s=
Subject key identifier: ED:09:65:89:92:A9:D0:CD:DA:43:BC:AD:B8:5B:91:77:C9:DE:BF:1C
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer: /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial: 01A0C3D729AE6992A434D816A4FEBD52DB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 12:00:53 +0000
Manifest this update: Mon 21 Sep 2026 12:00:53 +0000
Manifest next update: Tue 22 Sep 2026 12:00:53 +0000
Files and hashes: 1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: o+h/gmhvXdO+vm33YAZ3QRYpNIVaJHtqCgr0irJ/vuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:29:ae:69:92:a4:34:d8:16:a4:fe:bd:52:db:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Validity
Not Before: Sep 21 12:00:53 2026 GMT
Not After : Sep 22 12:00:53 2026 GMT
Subject: CN=ed09658992a9d0cdda43bcadb85b9177c9debf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:59:b7:32:d7:f5:ef:3e:b4:ff:fa:10:de:
cd:53:e3:14:40:c4:06:32:1b:fd:3c:38:0e:bd:50:
6f:e0:92:9c:f0:ab:6b:71:8f:5c:c6:b5:07:2c:39:
33:68:ed:1c:a8:e6:d4:43:b9:41:c5:a1:59:17:79:
70:19:76:33:ee:1d:61:48:a4:1f:7f:0a:bf:c3:f2:
53:fa:26:d3:b5:8c:46:a3:be:4d:fd:92:d3:8d:9e:
37:8c:f9:8e:4f:ce:b2:5a:cb:2b:d7:77:53:b1:7f:
d3:c0:d5:25:94:51:41:2e:d1:a5:69:e9:c0:53:f2:
7d:28:75:78:96:6b:90:e6:6b:ff:44:73:bf:92:d0:
2b:c2:6b:91:f3:2a:75:4c:7c:7f:38:79:0f:5d:f3:
52:ae:0c:2d:78:de:1c:94:e8:47:59:b8:d3:a3:a3:
8f:15:87:6d:95:59:6d:01:45:55:92:9f:9a:81:9a:
ab:c4:0f:89:f3:32:ed:2e:a9:53:71:71:7f:0c:c6:
1c:ad:2a:5a:b6:e5:40:4f:c2:8e:31:b5:2e:4f:91:
92:0c:3b:6c:3a:3b:9a:b8:38:df:ae:eb:90:e3:35:
42:96:20:ac:23:88:2e:58:96:4c:88:2e:8f:3d:63:
97:ea:5f:a3:97:12:bf:1f:7e:9b:8c:bb:3d:66:cf:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:65:89:92:A9:D0:CD:DA:43:BC:AD:B8:5B:91:77:C9:DE:BF:1C
X509v3 Authority Key Identifier:
keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0d:3c:97:17:cd:f4:82:7f:13:59:55:63:75:22:31:a6:72:
24:72:cb:cf:ee:f5:29:ce:13:50:33:b7:01:18:35:e0:ab:70:
7c:f4:17:2f:6c:97:42:a0:ac:5e:b5:2a:72:f7:d8:d3:19:2b:
69:7f:25:41:ca:fb:f6:fa:ab:70:45:d2:9c:86:b1:f2:15:a2:
1d:dc:59:7f:fb:43:9c:e7:76:9d:0e:bd:80:0c:ed:99:63:c9:
27:df:e9:b2:69:4b:3f:2c:84:92:01:84:bc:d9:77:4a:7b:4b:
fa:6e:de:58:0f:b7:16:bc:8f:3a:c0:d0:27:4a:e4:cf:17:2b:
e1:9d:5b:a0:1b:db:92:af:40:d0:11:82:53:7f:e3:1c:d0:1a:
10:11:4f:12:4f:c0:2d:43:64:98:3b:59:a5:67:21:42:bb:c9:
5b:c5:4e:f0:dd:0d:ae:8b:1c:ee:20:14:1a:ea:14:55:64:13:
bc:47:71:b5:25:f7:50:4a:66:1c:a7:73:32:69:e0:c3:59:58:
96:a2:46:9c:95:8b:33:40:74:b7:2a:85:c1:48:a9:de:5d:cc:
39:72:6b:6c:95:fb:cc:8d:9f:84:05:eb:e4:d7:e1:27:3e:d6:
8d:d0:e2:72:cf:5a:d3:79:df:07:a8:98:09:59:d9:c6:a2:be:
b7:0a:5d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1ymuaZKkNNgWpP69UtttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3
NmUwMDEwHhcNMjYwOTIxMTIwMDUzWhcNMjYwOTIyMTIwMDUzWjAzMTEwLwYDVQQD
EyhlZDA5NjU4OTkyYTlkMGNkZGE0M2JjYWRiODViOTE3N2M5ZGViZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVtZtzLX9e8+tP/6EN7NU+MUQMQG
Mhv9PDgOvVBv4JKc8KtrcY9cxrUHLDkzaO0cqObUQ7lBxaFZF3lwGXYz7h1hSKQf
fwq/w/JT+ibTtYxGo75N/ZLTjZ43jPmOT86yWssr13dTsX/TwNUllFFBLtGlaenA
U/J9KHV4lmuQ5mv/RHO/ktArwmuR8yp1THx/OHkPXfNSrgwteN4clOhHWbjTo6OP
FYdtlVltAUVVkp+agZqrxA+J8zLtLqlTcXF/DMYcrSpatuVAT8KOMbUuT5GSDDts
OjuauDjfruuQ4zVCliCsI4guWJZMiC6PPWOX6l+jlxK/H36bjLs9Zs9PHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0JZYmSqdDN2kO8rbhbkXfJ3r8cMB8GA1UdIwQY
MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt
OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw
LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ08lxfN
9IJ/E1lVY3UiMaZyJHLLz+71Kc4TUDO3ARg14KtwfPQXL2yXQqCsXrUqcvfY0xkr
aX8lQcr79vqrcEXSnIax8hWiHdxZf/tDnOd2nQ69gAztmWPJJ9/psmlLPyyEkgGE
vNl3SntL+m7eWA+3FryPOsDQJ0rkzxcr4Z1boBvbkq9A0BGCU3/jHNAaEBFPEk/A
LUNkmDtZpWchQrvJW8VO8N0Nrosc7iAUGuoUVWQTvEdxtSX3UEpmHKdzMmngw1lY
lqJGnJWLM0B0tyqFwUip3l3MOXJrbJX7zI2fhAXr5NfhJz7WjdDics9a03nfB6iY
CVnZxqK+twpdnw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:20 2026 by rpki-client